今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表CVE-2026-6295
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and inc
CVE-2026-5400
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values
CVE-2026-4792
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due
CVE-2026-4327
The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1
CVE-2026-2422
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pb
CVE-2026-2278
The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch
CVE-2026-1984
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a
CVE-2026-1641
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions
CVE-2026-1242
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callb
CVE-2026-15947
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o
CVE-2026-15946
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress
CVE-2026-15664
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-
CVE-2026-15463
The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Reflected Cross-Site Scr
CVE-2026-15098
The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortc
CVE-2026-13770
The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vul
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to,
CVE-2026-13191
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up t
CVE-2026-12402
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' S
CVE-2026-11899
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat
CVE-2026-11608
The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' param